cc.kebei:onion-expands-office (>=3.0.3, <=3.0.6), cc.kebei:onion-expands-script (>=3.0.3, <=3.0.6) +543 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.23.release)

org.springframework:spring-context MAVEN version 4.3.23.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cc.kebei:onion-expands-office =3.0.3, =3.0.3, =3.0.3, =3.0.5, =1.0.0, =1.2.3,...

ch.rasc:sse-eventbus (1.1.7), club.zhcs:axe-apm (>=1.5.13, <=1.5.13.2) +843 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.17.release)

org.springframework:spring-context MAVEN version 4.3.17.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ch.rasc:sse-eventbus 1.1.7 - club.zhcs:axe-apm =1.5.13, =1.5.13, =1.5.13, =1.5.13,...

ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base (3.0.0), ca.uhn.hapi.fhir:hapi-fhir-testpage-overlay (3.0.0) +1607 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.10.release)

org.springframework:spring-context MAVEN version 4.3.10.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-jpaserver-base 3.0.0 -...

at.molindo:spring-data-custom (1.0.0), at.researchstudio.sat:won-core (>=0.2, <=0.3) +1477 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.8.release)

org.springframework:spring-context MAVEN version 4.3.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:spring-data-custom 1.0.0 - at.researchstudio.sat:won-core =0.2, =0.2,...

am.ik.blog:blog-domain (>=4.0.2, <=4.2.0), am.ik.blog:blog-mapper (>=4.0.0, <=4.4.0) +1739 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.7.release)

org.springframework:spring-context MAVEN version 4.3.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - am.ik.blog:blog-domain =4.0.2, =4.0.0, =2.0.0, =1.0.3, =1.0.0, =2.4, =2.4, =2.4,...

at.molindo:spring-data-custom (0.1.0), be.looorent:jflu-producer-springmvc (>=0.1, <=0.13.6) +1143 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.3.4.release)

org.springframework:spring-context MAVEN version 4.3.4.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:spring-data-custom 0.1.0 - be.looorent:jflu-producer-springmvc =0.1,...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +10626 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0, <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: GHSA-4WP7-92PW-Q264...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:arango-axon (>=0.0.1, <=0.0.2) +9653 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (>=6.0.0, <=6.0.23)

org.springframework:spring-context MAVEN version =6.0.0, =0.1.3, =0.0.1, =0.0.1, =0.0.10, =0.0.10, =0.0.10, =0.0.6, =0.0.6, =0.0.28, =0.0.6, =0.0.7, =0.0.8, =0.0.11, =0.0.6, =0.3.2 - ai.superstream:spring-kafka 3.0.1-alpha1 and more Source cves: CVE-2025-22233 Source advisory:...

ca.islandora.indexing:islandora-indexing-triplestore (>=0.0.1, <=0.0.2), com.alibaba.compileflow:compileflow (>=1.0.0-rc1, <=1.2.0) +317 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.11.release)

org.springframework:spring-context MAVEN version 3.2.11.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - ca.islandora.indexing:islandora-indexing-triplestore =0.0.1, =1.0.0-rc1, =1.1.0,...

com.att.nsa:msgrtr (0.0.5), com.comcast.magic-wand:appium (>=4.0.1, <=4.0.3) +101 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (3.2.14.release)

org.springframework:spring-context MAVEN version 3.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - com.att.nsa:msgrtr 0.0.5 - com.comcast.magic-wand:appium =4.0.1, =1.0.8, =2.0.1,...

cn.jairdavis:jair-common-utils (1.0.4), com.aerse:gcless (11.2) +172 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.0.2.release)

org.springframework:spring-context MAVEN version 4.0.2.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.jairdavis:jair-common-utils 1.0.4 - com.aerse:gcless 11.2 -...

org.springframework:spring-dao (2.0-m4), org.springframework:spring-hibernate3 (2.0-m4) +4 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (2.0-m4)

org.springframework:spring-context MAVEN version 2.0-m4 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - org.springframework:spring-dao 2.0-m4 - org.springframework:spring-hibernate3 2.0-m4 -...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +434 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.8.release)

org.springframework:spring-context MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

at.molindo:molindo-notify (2.1.0), ch.powerunit.extensions:powerunit-extensions-spring (0.0.1) +628 more potentially affected by CVE-2025-22233 via org.springframework:spring-context (4.1.7.release)

org.springframework:spring-context MAVEN version 4.1.7.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo:molindo-notify 2.1.0 - ch.powerunit.extensions:powerunit-extensions-spri...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.2.0), ai.ancf.lmos-router:lmos-router-llm-spring-boot-starter (0.2.0) +10626 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.2.0, <=6.2.6)

org.springframework:spring-context MAVEN version =6.2.0, =0.114.0, =0.114.0, =0.114.0, =0.114.0, =0.5.0, =0.8.0, =1.0.0, =1.0.0, =1.0.29 and more Source cves: CVE-2024-38820, CVE-2025-22233 Source advisory: MEND:CVE-2025-22233...

ai.ancf.lmos-router:lmos-router-hybrid-spring-boot-starter (0.28.0), ai.ancf.lmos-router:lmos-router-llm-in-spring-cloud-gateway-demo (>=0.2.0, <=0.28.0) +15683 more potentially affected by CVE-2024-38820 +1 more via org.springframework:spring-context (>=6.1.0, <=6.1.19)

org.springframework:spring-context MAVEN version =6.1.0, =0.2.0, =0.1.1, =0.1.1, =0.1.1, =0.1.1, =0.0.4, =0.1.0, =0.1.0, =0.1.0-beta.1, =0.1.0-beta.2 - ai.djl.spring:djl-spring-boot-starter-autoconfigure 0.26 - ai.djl.spring:djl-spring-boot-starter-mxnet-auto 0.26 and more Source cves:...

Improper Handling of Case Sensitivity

Overview Affected versions of this package are vulnerable to Improper Handling of Case Sensitivity due to an incomplete fix for CVE-2024-38820, where it is still possible to bypass the disallowedFields checks. Note: This vulnerability was also fixed in commercial versions 6.0.28 and 5.3.43...

at.molindo.social:spring-social-config (1.1.4.release), at.molindo.social:spring-social-core (1.1.4.release) +434 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (4.1.8.release)

org.springframework:spring-context MAVEN version 4.1.8.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - at.molindo.social:spring-social-config 1.1.4.release -...

cn.weforward:weforward-data-mysql (>=1.1.0, <=1.2.17), com.alibaba.otter:canal.client (>=1.0.25, <=1.1.0) +362 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (3.2.9.release)

org.springframework:spring-context MAVEN version 3.2.9.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-context and may be impacted: - cn.weforward:weforward-data-mysql =1.1.0, =1.0.25, =1.0.25, =1.0.25, =1.0.25,...

ai.optfor:spring-openai-api (>=0.1.3, <=0.3.25), ai.stapi:arango-axon (>=0.0.1, <=0.0.2) +9653 more potentially affected by CVE-2024-38820 via org.springframework:spring-context (>=6.0.0, <=6.0.23)

org.springframework:spring-context MAVEN version =6.0.0, =0.1.3, =0.0.1, =0.0.1, =0.0.10, =0.0.10, =0.0.10, =0.0.6, =0.0.6, =0.0.28, =0.0.6, =0.0.7, =0.0.8, =0.0.11, =0.0.6, =0.3.2 - ai.superstream:spring-kafka 3.0.1-alpha1 and more Source cves: CVE-2024-38820 Source advisory:...